From owner-freebsd-security@FreeBSD.ORG  Thu Sep 23 04:49:57 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 25EFE16A4CE
	for <freebsd-security@freebsd.org>;
	Thu, 23 Sep 2004 04:49:57 +0000 (GMT)
Received: from cleaton.net (cleaton.net [82.138.248.193])
	by mx1.FreeBSD.org (Postfix) with SMTP id 5435043D2F
	for <freebsd-security@freebsd.org>;
	Thu, 23 Sep 2004 04:49:56 +0000 (GMT)
	(envelope-from nick@cleaton.net)
Received: (qmail 78384 invoked by uid 0); 23 Sep 2004 04:49:54 -0000
Received: from cleaton.net (HELO lt4.cleaton.net) (82.138.248.193)
  by cleaton.net with SMTP; 23 Sep 2004 04:49:54 -0000
Received: from nick by lt4.cleaton.net with local (Exim 4.30)
	id 1CALao-0000Oj-FA
	for freebsd-security@freebsd.org; Thu, 23 Sep 2004 06:52:30 +0200
Date: Thu, 23 Sep 2004 06:52:29 +0200
From: Nick Cleaton <nick@cleaton.net>
To: freebsd-security@freebsd.org
Message-ID: <20040923045229.GJ5340@lt1.cleaton.net>
References: <414C2798.7060509@withagen.nl>
	<6917b781040918103077c76f0c@mail.gmail.com> <414CAC56.8020601@withagen.nl>
	<6917b781040918150446b7dada@mail.gmail.com> <414CB5EF.7080901@withagen.nl>
	<20040918222819.GG20449@pir.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20040918222819.GG20449@pir.net>
User-Agent: Mutt/1.3.28i
Subject: Re: Attacks on ssh port
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Sep 2004 04:49:57 -0000

On Sat, Sep 18, 2004 at 06:28:19PM -0400, Peter Radcliffe wrote:
> 
> Personally I only allow ssh from known legitimate sources and block the
> rest so the "noise" is in a completely different list.
> 

I want access to my system from any IP address, so I've patched my sshd so
that a secret token is required to connect.  Kinda like using an obscure
port, only more so :)

   http://nick.cleaton.net/openssh-3.8p1-cc-0.03.patch


Nick


-- 
$_='YN8KuE***  http://www.exonetric.com/  Telehouse UK colo  ***HARQr**'
.'NfzV0YrC1***     GBP40/month +VAT 40G BW no setup fee     ***MnjJ**'
.'6QvtcPgQ20***                                            ***nlS**'
;s/(.)(.*(.))/$2.chr(32+(ord($1)+ord$3)%89)/euntil/Foo/;eval#****'